Live data from Hacker News

Dropbox exposes personal details of viewers of publicly shared Paper documents

twitter.com

61–70 of 112 posts

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#61
post #22

Man alive, all I want is a folder that syncs. That's all. I understand that Dropbox is a business and blah blah blah ... so what are my alternatives if I literally only want: - a folder that syncs on my devices - the ability to share a folder with others - cross-platform

I use Resilio Sync. It's not free, but was just a one time payment, not a subscription. Works on macOS, Linux, Windows, and they have an iOS app, too. Sharing with others is possible, but they have to have the app installed to access the files. Resilion Sync doesn't provide any server through which you can download the files, it's all P2P.

I couldn't figure out their licensing or payment model for a team, everything led back to subscriptions and was hideously complicated. We went back to Dropbox because it just worked, no matter how much cruft its taken on.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#62

Not only that, but Dropbox lets you pick any publicly visible document that's been viewed by a large number of people and easily spam them simply by writing @doc. I may have just pissed off a lot of people with my experiment :( I realised immediately afterwards how reckless that was, but Dropbox - WTF? Why is this even allowed?

I was spammed by you. I first thought you're an idiot, but this is fine ;)

Pinging all viewers of a public document with a message should not be possible.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#63

Not only that, but Dropbox lets you pick any publicly visible document that's been viewed by a large number of people and easily spam them simply by writing @doc. I may have just pissed off a lot of people with my experiment :( I realised immediately afterwards how reckless that was, but Dropbox - WTF? Why is this even allowed?

Sometimes there will be a little pain associated with creating more awareness to issues like this... you did the right thing.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#64

Not only that, but Dropbox lets you pick any publicly visible document that's been viewed by a large number of people and easily spam them simply by writing @doc. I may have just pissed off a lot of people with my experiment :( I realised immediately afterwards how reckless that was, but Dropbox - WTF? Why is this even allowed?

Thanks for this, I forgive you for this; hope Dropbox fixes this soon enough.

I went a while being followed by spam after a Dropbox email leak a few years ago

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#65
post #40

Earlier quoted context omitted.

+1 on the Nextcloud. It hosts files great and completely replaced Dropbox. It also hosts my Contacts, Calendar, and with Collabra, it is a complete Google Docs replacement too. Like someone else said further down, it also does automatic picture uploads too.

Ah, good to hear that. I still have to look into that to decouple more from Google. Do you have any good resources for more information on how to move contacts and calendar? Or did this work right from the start for you?

It was pretty out of the box friendly. You have to download all of that from google (I recall they have an export function), and it was in a file that nextcloud natively accepts.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#66
post #26

Earlier quoted context omitted.

Keybase. I really wish they would get their act together and let me pay them for the service.

They're very clearly not aiming at being professional, with this trashing focus on random features.

What focus is missing? It works great, only missing feature as GP says is paid upgrade (first 250GB is free 'and always will be').

https://keybase.io/docs/kbfs

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#67

Earlier quoted context omitted.

Nextcloud. Has windows, Linux and iOS clients. Also integrates with Files on iOS, and has camera-upload which works better than Dropbox. Best switch I ever made.

Thanks. I just tried the demo, but it's not working in Firefox 69.0 at all. It loads, but nothing works. https://imgur.com/a/w8cyFWf

Weird. Don’t have any issues like that in my setup, but I can see not having a working demo to judge a product by makes it hard to commit.

Works for me, though, for what it’s worth.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#68
post #22

Man alive, all I want is a folder that syncs. That's all. I understand that Dropbox is a business and blah blah blah ... so what are my alternatives if I literally only want: - a folder that syncs on my devices - the ability to share a folder with others - cross-platform

I'll also vouch for syncthing. It's the best file sharing application. It works cross platform, has windows, linux, android and mac clients. I can choose to share specific folders for each device. I have one set up on a DO droplet and seamlessly syncs across all my devices. Also, when two devices are on the same LAN, it discovers the devices automatically. Couldn't praise it enough! https://syncthing.net/

SyncThing is great, but the lack of a functional iOS app hurts.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#69
post #32

Earlier quoted context omitted.

They're really looking like they've got laser focus on file sync with their crypto wallet support and random crap coin giveaways

I've used Keybase for file sync/backup—though not extensively. In spite of all of those other points, I've found the sync does work pretty seamlessly if you just need 1:1 sync and limited special features. That suits me well enough.

Definitely not 1:1 sync.

They're not even saving metadata which is available on all filesystems such as timestamps etc.

Re: Dropbox exposes personal details of viewers of publicly shared Paper documents

#70

Earlier quoted context omitted.

I use Resilio Sync. It's not free, but was just a one time payment, not a subscription. Works on macOS, Linux, Windows, and they have an iOS app, too. Sharing with others is possible, but they have to have the app installed to access the files. Resilion Sync doesn't provide any server through which you can download the files, it's all P2P.

I couldn't figure out their licensing or payment model for a team, everything led back to subscriptions and was hideously complicated. We went back to Dropbox because it just worked, no matter how much cruft its taken on.

Yeah, their enterprise offerings are subscription based (per user). I only use it privately.
Post reply on HN